https://blog.cloudflare.com/unauthorized-issuance-of-certificates-for-1-1-1-1/

https://www.bleepingcomputer.com/news/security/ssl-tls-certificate-lifespans-reduced-to-47-days-by-2029/

https://bugzilla.mozilla.org/show_bug.cgi?id=1950144

https://github.com/nh2/internal-contstrained-pki

https://www.digicert.com/support/certificate-revocation-incident

https://www.pixelstech.net/article/1722045726-All-I-Know-About-Certificates----Certificate-Authority

https://aws.amazon.com/blogs/security/how-to-verify-aws-kms-asymmetric-key-signatures-locally-with-openssl/?sc_channel=sm&sc_campaign=AWSSecurity_Services&sc_publisher=TWITTER&sc_country=Security&sc_geo=GLOBAL&sc_outcome=adoption&trk=AWSSecurity_Services_TWITTER&linkId=86699220

https://rehn.me/posts/pki-for-busy-people.html